CC CERT / TLS + CERTIFICATE INSPECTION
INSPECT THEHANDSHAKE.
Verify what a public TLS endpoint actually presents on port 443. CC CERT pins the connection to an admitted public IP, validates the hostname and trust chain, and reports certificate/TLS evidence without downloading the page.
TOOL 003 / ACTIVE TLS INSPECTORCC TOOLS / READY
CONNECTIONPINNED PUBLIC IPDNS IS VALIDATED BEFORE CONNECT
AUTHORITYSYSTEM TRUST STOREHOSTNAME + CHAIN VERIFIED
CONTENTNOT FETCHEDTLS HANDSHAKE ONLY
VERDICTCONNECTION EVIDENCENOT A WEBSITE SAFETY CLAIM
TLS INSPECTION RESULT—
HOSTNAME—
CONNECTED IP—
TLS—
CHAIN—
CERTIFICATE—
- SUBJECT
- —
- ISSUER
- —
- VALID UNTIL
- —
- DAYS REMAINING
- —
- SAN ENTRIES
- —
TLS SESSION—
- PROTOCOL
- —
- CIPHER
- —
- CIPHER BITS
- —
- ALPN
- —
- ROUND TRIP
- —
——
Certificate/TLS verification does not prove the website is benign, trustworthy, or safe.ACTIVE REMOTE CHECKPUBLIC TLS / 443 ONLY
CC CERT makes a direct TLS connection from the CC server to the admitted public destination. It does not issue an HTTP request, download page content, follow redirects, execute scripts, or connect to private/internal addresses. The destination can observe the inbound TLS connection from CC infrastructure.